Flatsonar

Atomic Rollback Tool

by Universal Blue

Manage and rollback ostree deployments

Dangerous permissions Suspicious publisher GPL-3.0-or-later v0.6
Install Source code

About

Atomic Rollback Tool is a specialized utility for managing ostree-based system deployments. It provides an easy-to-use interface for rolling back to previous deployments, pinning deployments to prevent cleanup, and restoring historical deployments from container registries. Features: - View all system deployments with clear status indicators - Rollback to previous deployments with one click - Pin deployments to protect them from automatic cleanup - Search and restore deployments from the last 90 days - Support for Universal Blue and Fedora atomic systems

Permissions

7 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • access to operating-system files
    --filesystem=host-os:ro
  • access to operating-system files
    --filesystem=host-etc:ro
  • systemd: can manage services
    --talk-name=org.freedesktop.systemd1
  • session management (logout, suspend)
    --talk-name=org.freedesktop.login1
  • authorisation (polkit)
    --talk-name=org.freedesktop.PolicyKit1
  • authorisation (polkit)
    --system-talk-name=org.freedesktop.PolicyKit1
  • inter-process communication (needed for X11)
    --share=ipc
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri
  • access to /run/host/etc
    --filesystem=/run/host/etc:ro
  • access to /var/log
    --filesystem=/var/log:ro
  • access to /proc
    --filesystem=/proc:ro
  • access to /sys
    --filesystem=/sys:ro
  • access to /usr/bin/rpm-ostree
    --filesystem=/usr/bin/rpm-ostree:ro
  • access to /usr/libexec/rpm-ostree
    --filesystem=/usr/libexec/rpm-ostree:ro
  • talks to org.projectatomic.rpmostree1
    --talk-name=org.projectatomic.rpmostree1
  • portal Desktop
    --talk-name=org.freedesktop.portal.Desktop
  • portal NetworkMonitor
    --talk-name=org.freedesktop.portal.NetworkMonitor
  • portal MemoryMonitor
    --talk-name=org.freedesktop.portal.MemoryMonitor
  • portal Settings
    --talk-name=org.freedesktop.portal.Settings
  • portal Flatpak
    --talk-name=org.freedesktop.portal.Flatpak
  • network
    --share=network

Who publishes this

Something concrete is wrong: the id claims a namespace this repository does not own, or the build does things a build should not. Flatsonar warns twice.

  • io.github.ublue.RollbackTool claims the io.github.ublue namespace but is hosted by github.com/ulilbagel and does not build the owner's code
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.